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Abstract 

In this paper we consider a type system with a universal type ui where 
any term (whether open or closed, /3-normalising or not) has type ui. We 
provide this type system with a realisability semantics where an atomic type is 
interpreted as the set of A-terms saturated by a certain relation. The variation 
of the saturation relation gives a number of interpretations to each type. We 
show the soundness and completeness of our semantics and that for different 
notions of saturation (based on weak head reduction and normal /3-reduction) 
we obtain the same interpretation for types. Since the presence of w prevents 
typability and realisability from coinciding and creates extra difficulties in 
characterizing the interpretation of a type, we define a class U + of the so-called 
positive types (where ui can only occur at specific positions) . We show that if 
a term inhabits a positive type, then this term is /3-normalisable and reduces 
to a closed term. In other words, positive types can be used to represent 
abstract data types. The completeness theorem for U + becomes interesting 
indeed since it establishes a perfect equivalence between typable terms and 
terms that inhabit a type. In other words, typability and realisability coincide 
on U + . We give a number of examples to explain the intuition behind the 
definition of U + and to show that this class cannot be extended while keeping 
its desired properties. 

1 Introduction 

The ground work for intersection types and related notions was developed in the 
seventies [5j [SJ [IS] and have since proved to be a valuable tool in the theoreti- 
cal studies and applications of the lambda calculus. Intersection types incorporate 
type polymorphism in a finitary way (where the usage of types is listed rather 
than quantified over). Since the late seventies, numerous intersection type sys- 
tems have been developed or used for a multitude of purposes (the list is huge; 
for a very brief list we simply refer the reader to the recent articles [TJ 0] and the 
references there, for a longer list we refer the reader to the bibliography of inter- 
section types and related systems available (while that URL address is active) at 
http://www.macs.hw.ac.uk/~jbw/itrs/bibliography.html). In this paper, we 
are interested in the interpretation of an intersection type. We study this interpre- 
tation in the context of the so-called realisability semantics. 

The idea of realisability semantics is to associate to each type a set of terms which 
realise this type. Under this semantics, an atomic type is interpreted as the set of 
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A-terms saturated by a certain relation. Then, arrow and intersection types receive 
their intuitive interpretation of functional space and set intersection. For example, 
a term which realises the type N — > N is a function from N to N. Realisability 
semantics has been a powerful method for establishing the strong normalisation of 
type systems a la Tait and Girard. The realisability of a type system enables one 
to also show the soundness of the system in the sense that the interpretation of a 
type contains all the terms that have this type. Soundness has been an important 
method for characterising the algorithmic behaviour of typed terms through their 
types as has been illuminative in the work of Krivine. 

It is also interesting to find the class of types for which the converse of soundness 
holds. I.e., to find the types A for which the realisability interpretation contains 
exactly (in a certain sense) the terms typable by A. This property is called com- 
pleteness and has not yet been studied for every type system. 

In addition to the questions of soundness and completeness for a realisability 
semantics, one is interested in the additional three questions: 

1. Can different interpretations of a type given by different saturation relations 
be compared? 

2. For a particular saturation relation, what are the types uniquely realised by 
the A-terms which are typable by these types? 

3. Is there a class of types for which typability and realisability coincide? 

In this paper we establish the soundness and completeness as well as give answers to 
questions 1 , 2 and 3 for a strict non linear intersection type system with a universal 
type. We show that for different notions of saturation (based on weak head reduction 
and normal /3-reduction) we obtain the same interpretation for types answering 
question 1 partially. Questions 2 and 3 are affected by the presence of to which 
prevents typability and realisability from coinciding and creates extra difficulties in 
characterizing the interpretation of a type. We define a class U + of the so-called 
positive types (where lu can only occur at specific positions). We show that if a 
term inhabits a positive type, then this term is /3-normalisable and reduces to a 
closed term. In other words, positive types can be used to represent abstract data 
types. This result answers question 2 and depends on the full power of soundness. 
The completeness theorem for U + becomes interesting indeed since it establishes a 
perfect equivalence between typable terms and terms that inhabit a type. In other 
words, typability and realisability coincide on U + answering question 3. We give 
a number of examples to explain the intuition behind the definition of U + and to 
show that this class cannot be extended while keeping its desired properties. 

Hindley P21 Q31 [14] was the first to study the completeness of a simple type sys- 
tem and he showed that all the types of that system have the completeness property. 
Then, he generalised his completeness proof for an intersection type system [llj . 
Using his completeness theorem for the realisability semantics based on the sets 
of A-terms saturated by /^-equivalence, Hindley has shown that simple types have 
property 2 above. However, his completeness theorem for intersection types does 
not allow him to establish property 2 for the intersection type system. Moreover, 
Hindley's completeness theorems were established with the sets of A-terms saturated 
by /^-equivalence, and hence they don't permit a comparison between the differ- 
ent possible interpretations. In our method, saturation is not by /3?y-equivalence. 
Rather, it is by the weaker requirement of weak head normal forms. Hence, all of 
Hindley's saturated models are also saturated in our framework and moreover, there 
are saturated models based on weak head normal form which cannot be models in 
Hindley's framework. 

[I"6] has established completeness for a class of types in Girard's system F (also 
independently discovered by Reynolds as the second order typed A-calculus) known 
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as the strictly positive types. [HI [TO] generalised the result of [TB] for the larger class 
which includes all the positive types and also for second order functional arithmetic. 
[7] established recently by a different method using Kripke models, the completeness 
for the simply typed A-calculus. Finally [17] introduced a realizability semantics for 
the simply typed A/Lt-calculus and proved a completeness result. 

The paper is structured as follows: In section O we introduce the intersection 
type system that will be studied in this paper. In section [3] we study both the 
subject reduction and subject expansion properties for p. In section [4] we establish 
the soundness and completeness of the realisability semantics based on two notions 
of saturated sets (one using weak head reduction and the other using /3-reduction). 
In section [S] we show that the meaning of a type does not depend on the chosen 
notion of saturation (based on either weak head reduction or /3-reduction). We also 
define a subset of types which we show to satisfy the (weak) normalisation property 
and for which typability and realisability coincide. 

2 The typing system 

A number of intersection type systems have been given in the literature (for a very 
brief list see [1] [4] and the references there; for a longer list (and while that URL ad- 
dress is active) see http : //www. macs .hw. ac . uk/~jbw/itrs/bibliography .html). 
In this paper we introduce an interesection type system due to J.B. Wells and in- 
spired by his work with Sebastien Carlier on expansion [1] . We follow [1] and write 
the type judgements T h M : U as M : (r h U). There are many reasons why this 
latter notation is to be prefered over the former (see [4]). In particular, this typing 
notation allowed J.B. Wells in [20] to give a very simple yet general definition of 
principal typings. 

Before presenting the type system, we give a number of its characteristics: 

• The type system is relevant: this means that the type environments contain 
all and only the necessary assumptions as is shown in lemma I7IT1 

• The type system is strict and non-linear. Following the terminology of [19] 
(who advocated the use of of linear systems of intersection types only with 
strict intersection types) , types are strict if u> and n do not occur immediately 
to the right of arrows. Our type system is non-linear since n is idempotant. 
We guarantee strictness by using two sets of types T and U such that Tel) 
and T is only formed by either basic types or using the arrow constructor 
(without permitting u) and n to occur immediately to the right of arrows). 
This means that one does not need to state laws relating A — > (Bi IIB2) to 
(A — > Bi) l~l (^4 — > B2), yet one can still establish a number of type inclusion 
properties as is shown in lemma [5] 

Definition 1 1. Let V be a denumerably infinite set of variables. The set of 
terms M, of the A- calculus is defined as usual by the following grammar: 

M ::= V I (XV. M) \ (MM) 

We let x,y, z, etc. range over V and M, N, P, Q, Mi, M2, ■ ■ ■ range over M. 
We assume the the usual definition of subterms and the usual convention for 
•parenthesis and omit these when no confusion arises. In particular, we write 
M Ni...N n instead of (...(M Ni) iV 2 ...JV n _i) N n . 

We take terms modulo a-conversion and use the Barendregt convention (BC) 
where the names of bound variables differ from the free ones. When two terms 
M and N are equal (modulo a), we write M — N . We write FV(M) for the 
set of the free variables of term M. 



3 



2. We define as usual the substitution M[x := N] of the term N for all free oc- 
currences of x in the term M and similarly, M[(xi := A^)"], the simultaneous 
substitution of Ni for all free occurrences of Xi in M for 1 < i < n. 

3. We assume the usual definition of compatibility. 

• The weak head reduction t> f on M. is defined by: M >fN if M — 

n and N — P[x : — Q] Qi-..Q n where n > 0. 

• The reduction relation \>p on M. is defined as the least compatible relation 
closed under the rule: (Xx.M)N t>p M[x := N]. 

• For r £ {/,/?}, t>* denotes the reflexive transitive closure oft> r . 

• ~^ denotes the equivalence relation induced by t>*^. 

The next theorem is standard and is needed for the rest of the paper. 
Theorem 2 1. Let r G {/,/?}. If M >* N, then FV(N) C FV(M). 

2. IfM t>* N, then, for all P E M, MP t>* NP. 

3. IfM t>* Mi and M >* p M 2 , then there is M' such that Mi>* p M' and M 2 >^M'. 
4- Mi M 2 iff there is a term M such that M x [>l M and M 2 >p M. 

5. Let n > 1 and assume Xi ^ FV(M) for every 1 < i < n. If Mx\...x n >^ 
Xj Ni...N m for some 1 < j < n and m > 0, then for some k > j and s < m, 
M t>p \x\....\xk-Xj M\...M S where s + n = k + m, Mi Ni for every 
1 < i < s and N s+ i ~p Xk+i for every 1 < i < n — k. 

6. If M x is weakly (3 -normalising and x ^ FV(M), then M is also weakly f3- 
normalising. 

Proof See [3] for more detail. Here, we sketch the proofs. [1] (resp. is by 
induction on M t>* N (resp. M >J N). [3]is the Church-Rosser. [4] if) is by definition 
of ~p whereas only if) is by induction on Mi ~^ M 2 using [3l 

[5] is as follows: Since Mxi...x n t>pXjN\...N m , then by page 23 of [15], Mxi...x n 
is solvable and hence, M is also solvable and its head reduction terminates. 
Therefore, M Xxi...Xxk-zMi...M s for s, k > 0. Since x 3 Ni...N m ~p 
(Xxk-zMi...M s )xi...x n then k < n,Xj Ni...N m ~^ zMi...M s Xk+x»-x n . Hence, 
z = Xj, s < m, j < k (since Xj ^ FV(M)), m = s+(n— (fc+l)) + l = s+n — k, 
Mi c^p N for every 1 < i < s and N s+ i ~p Xk+i for every 1 < i < n — k. 

[6] is by cases: 

- li Mx>*p M' x where M' x is in (3- normal form and M >*p M' then M' 
is in /3-normal form and M is /3-normalising. 

— If M x t>* } (Xy.N) x\>p N[y := x] \>p P where P is in /3-normal form and 
M Op Xy.N then by ED x FV(N) and so, M \>* p Xy.N = Xx.N[y := 
x] l>*p Xx.P. Since Xx.P is in /3-normal form, M is /3-normalising. 

□ 
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Definition 3 1. Let A be a denumerably infinite set of atomic types. The types 
are defined by the following grammars: 



T ::= A | U -> T 

U ::= uj | UnU | T 

We let a, b, c, a\, a 2 , . . . range over A, T, T\, T 2l T' , . . . range over T and U, V, 
W, U\, V\, [/',.■• range over U. 

We quotient types by taking n to be commutative (i.e. Ui n U 2 = U 2 n /7]J, 
associative (i.e. Ui n ([/ 2 n ?7 3 ) = (t/i n £/ 2 ) n J7 3 J, idempotent (i.e. UUU = U) 
and to have lo as neutral (i.e. ujHU = U). 
We denote U n l~l U n+ i . . . I~l U m by n^l n Ui (when n < m). 

2. A type environment is a set {xi : Ui / 1 < i < n, n > 0, and VI < i < 
n, X{ G V, ?7j G U and VI < i,j < n, if i ^ j then Xi ^ xj}. We denote 
such environment (call it T) by x\ : U\, . . . , x n : U n or simply by (xi : Ui) n 
and define dom(T) — {xi / 1 < i < n). We use T, A, Ti, . . . to range over 
environments and write () for the empty environment. 

If M is a term and FV(M) = {x\, ...,x n }, we denote env^f — (xi : cu) n . 

If T — (xi : Ui) n , x ^ dom(T) and U G U, we denote T,x : U the type 
environment x\ :U\, . . . ,x n : U n , x : U. 

Let Ti = (xi : Ui) n ,(yj : Vj) m and T 2 = (x t : U-) n ,(z k : W k )i- We denote 
Ti l~l T 2 the type environment (xi : Ui n U!) n , (t/j : Vj) m , (zk ■ Wk)i- Note that 
dom(Ti n T 2 ) = domiTi) U dom(T 2 ) and that n is commutative, associative 
and idempotent on environments. 

3. The typing rules are the following: 



ax 



x : (x : T h T) 

M : (envM h oj) ^ 

M : (T,x : U \- T) 
Xx.M :(ThU^T) ^ l 

M : (r h T) x <£ dom(T) , 
Xx.M -.(Thuj^T) ^ 

M 1 :{T 1 \-U^ T) M 2 : (T 2 h U) 

m 1 m 2 : (ri n r 2 h T) 

M : (r h Ui) M : (V h U 2 ) 



m : (r h Ui n u 2 ) 



r\4 



m ■. (r \- u) (rhu)c (r' h u 1 ) 

M:(r'h U') 



In the last clause, the binary relation C is defined by the following rules: 

ref 

$ C $ 
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$1 C $2 <& 2 E $3 

; ; tf 

n e 

C/i n C/ 2 c t/i 

^ E Vi t/ 2 E ^2 
i/x n C7 2 e Vi n y 2 

£/ 2 E Ui T\ E r 2 
t/j -» Tx e c/ 2 -> r 2 "* 

C/i E C/ 2 a; £ dom(r) 
T, a; : i7i E I\ x : U 2 ~ C 

Ui nu 2 r 2 e £i c 

<ri h U x ) E {T 2 h C/ 2 ) "° 

Throughout, we use $,$',$1,... to denote U G U, or environments V or 
typings (T \- U). Note that when $ E } then $ and $' belong to the same 
set (either U or environments or typings). 

The next lemma gives the shape of a type in U. 

Lemma 4 LlfUeU, then U = us or U = nf =1 T< w/iere n > 1 and V 1 < i < 

n, T.el 

3. If u E t/, */ien U = lu. 
Proof 

[1] By induction on U G U. 
H By rule n e , t/ = w n [/ E w. 
[3] By induction on the derivation 

□ 

The next lemma studies the relation E on U. 

Lemma 5 Let V ^ u>. 

l.IfUQ V, then U = n k j=1 T j; V = Vf l=1 T[ where p,k > 1, VI < j < k, 
l<i<p,Tj,T(eT,and\fl<i<p,3l<j<k such that T 3 E T{. 

2. IfUQV'n a, then U = U' n a and U' E V . 

3. Letp, k > 1. Ifn k j=l {Uj -> T 3 ) C Vf l=1 {U[ -> T(), then VI < i < p, 31 < j < k 
such that U[ E Uj and Tj E T( . 

4. IfU^TQV, then V = n p l=1 (U t -> T-) where p > 1 and VI < i < p, U % E U 
and TOT,. 

5- If n^ =1 (Z7j -> Tj) E V w/iere fc > 1, then V = Vf i=l {U[ -» T/) w/iere p > 1 
and VI < i < p, 31 < j < k U{ E E/j and Tj C T/. 
Proof 
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[T] By induction on the derivation U E V using lemma EHT1 
[2] By induction on U E V n a. 

1 By induction on n^ =1 (ZXj -> 2}) C nf =1 (£// -> T/). We only do the tr case. 
If ; r ~ - '- 1 - then, by [TJ V = n* ,T ; where 

n* =1 (^- - r,-) c rf =1 (^ -2;') 

g > 1 and VI < / < g, 31 < j < k, such that t/j -> T 3 - E T/'. If T/' = a, 
then, by H f/j -> Tj = U' n a. Absurd. Hence, VI < Z < g, T" = V\ -> T/" 
and V = nf =1 (Vj -> T/"). Let 1 < i < p. By IH, 31 < I < q, U[ E ^ and 
T/" E T[. Also, by IH, 31 < j < k, Vi E C/ 3 and Tj E T/". Hence, VI < t < p, 
31 < j < fc, such that [7? E {Tj and Tj E T/. 

|U By U V = nf =1 T/ where p > 1 and VI < i < p, U -> T E T/. If T/ = a, 
then, byd t/ -> T = U' n a. Absurd. Hence, T( = U % -> T. Hence, by[3J 
VI < i < p, C/j E U and T C T t . 

[5] Since V ^ u, then, by lemma HITl V = l~f =1 T/ where p > 1 and VI < i < p, 
T{ £ T. Let 1 < i < p. By [2 31 < < & such that f7 i4 -> T k E T/. ByH 
and since T/ € T, T/ = [// — > T/' where U[ E f/^ and T^ C T/'. Hence, 
^ = n Li<K ~> T ") where P > 1 and VI < i < p, 31 < j 4 < fc [// C U jt and 
^ E T/'. 

□ 

The next lemma studies the relation E on environments and typings. 
Lemma 6 l.IfTQ T' , then dom{T) = dom(T'). 

2. 7/rc r' ; U E U' and x <£ dom{T), then F, x : U E T', x : C7'. 

3. r E T' iff r = (x t : r = (x { : C7/)„ and /or every 1 < i < n, Ui E U[. 

4. Ifdom(T) = FV(M), then T E env^f 

5. If env^f E r, then T = env^f . 

6. (r h U) E (T' h [/'} iff T' E T and C/C[/'. 

7. J/rc r and A E A', t/ien inACI'nA'. 
Proof 

[U By induction on the derivation rcT'. 

[2] First show, by induction on the derivation I C T' (using [l}, that if T E T', 
V e U and y dom(r) then r, y : V E T', y : V. Then use tr. 

[3] Only if) By[l] T = [xi : J7i) n and V = (xi : Ui) n . The proof is by induction 
on the derivation (xi : Ui) n E (xi ■ U[) n . If) By induction on n usingO 

HI Let FV(M) = {xi, . . . ,x n } and T = (xj : J7j) n . By definition, env^ 1 = 
(xi,uj) n . Hence, by lemma and [51 T E env^ 1 . 

[5] Let FF(M) = {xi, . . . , x n }. By definition, env^ 1 — (x,, w)„. By [31 T = (xj : 

?7i)„ and VI < i < n, u> E Ui. Hence by lemma VI < i < n, co = Ui. 

ED Only if) By induction on the derivation (r H U) E (r' h C/')- If ) By 
[7] This is a corollary of [31 

□ 



7 



The next lemma shows that we do not allow weakening in our type system. 

Lemma 7 1. If M : {V h U), then dom(T) = FV(M). 

2. For every T and M such that dom(T) — FV(M), we have M : (T h uj). 
Proof 

[1] By induction on the derivation M : (r h U). 

[2] By lu, M : (env^f h uj). By lemma EH T Q env™ . Hence, by C and 
M:(rhw). 

□ 

Finally, it may come as a surprise that the rule ax uses types in T instead of 
U and that in the rule n we take the same environment. The lemma below shows 
that this is not restrictive. 

, M:(T 1 hUi) M:(r 2 \-U 2 ) 
Lemma 8 1. The rule — — r— — ■ — — — — IT. is derivable. 

m ■. (ri nr 2 h Ui nu 2 ) 

2. The rule j-. — — r- ax' is derivable. 

x : {[x : U) h U) 

Proof 

[U Let M : (T x h U x ) and M : (T 2 h J7 2 ). By lemmaH dom(ri) = rfom(r 2 ) = 
FV(M). Let Fi = {x t : V,) n and F 2 = (x l : V() n . Hence, Ti n F 2 = 
(xi : Vi n V[) n . By ^ n V{ C ^ and ^ n F/ C V"/ for all 1 < i < n. 
Hence, by lemma ECS Ii n F 2 C Fi and Ti n T 2 C F 2 , and, by rules C 
and M : (ri n r 2) Ui) and M : (T 1 n F 2 ,[/ 2 ). Finally, by rule r^, 

m ■. (Ti n r 2 , Ui n [/ 2 ). 

[1 By lemma HH1 

— Either U = u>, then, by rule w, we have x : ((x : tv) hu). 

- Or [/ = n 4 fc =1 Ti where VI < i < k, T, G T, then, by rule ax, x : ((x : 
Ti) h Ti) and, by k — 1 applications of rule r\' { , x : ((x : U) h U) . 

□ 



3 Subject reduction and expansion properties 

In this section we establish the subject reduction and subject expansion properties 
for (3. 

3.1 Subject reduction for (3 

We start with a form of the generation lemma. 

Lemma 9 (Generation) 1. If x : (V h U), then T = (x : V) and V C U. 

2. If M x : (T,x : U h V) and x £ FV(M), then V = uj or V = nf =1 T 4 where 
k>land\/l<i< k, M : (T \-U —y T t ) . 

3. IfXx.M :{T\-U) and x E FV(M), then U = uj or U = n*? =1 (Vi -> T t ) where 
k > 1 and VI < i < k, M : (T, x : Vi h T 4 ). 

4. IfXx.M : (r h U) and x g FV(M), then U = uj or U = V^ =x (Vi -> T t ) where 
k > 1 andVl < i < k, M : {T h T 4 ). 
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Proof [T] By induction on the derivation x ; (r h U). We have four cases: 

• If 77 r r\ i— 7 nothin g t0 P rove - 

i : ((i : J ) h i ) 

• If 77 — -, nothing to prove. 

x : {(x : w) h w) 

• Let X:{T t^Lll^±M , By IH, V = (x : V), V Q U\ and V C [7 2 , 

x : (1 h (7i fl (72/ 



then, by rule n, V E £7i n [7; 



2- 



. Let ^^(Lh^ By lemmaEE1 r r ^ w ^ ^ 

x : (r h (7) 

and, by IH, V = (x : V") and V' E £7'. Then, by lemma EE V = (x : V), 
V E V and, by rule ir, 

[2j By induction on the derivation M x : (r, x : U h V). We have four cases: 

• If 77 7 a/ a; i— \ ' nothin g t0 P rove - 

M x : {envfy x r w) 

M : (r h J7 — > T) x : ((x : V) h L7) , ta rrx 

Since U HV ->T,we have M : (r I- V — > T). 

T . Mx: (r,x:U\-U!) M x : (T,x:U\-U 2 ) n TXJ , , 

• Let ; ■ : . By IH, we have four cases: 

Mx : (r,x : U h C7i n £7 2 ) 

- If L7i = C7 2 = w, then {7i n [7 2 = w. 

- If Z7i = w, C7 2 = nJ =1 Ti, fc > 1 and VI < % < k, M : (r h f7 -> 77;), then 
U\ n Z7 2 = c7 2 (a; is a neutral element). 

- If Z7 2 = w, C7i = nJ =1 Ti, k > 1 and VI < % < k, M : (r h f7 -> 77j), then 
C^i n C7 2 = J7i (w is a neutral element). 

- If C7i = nfUTi and U 2 = n\ =1 T k+l (hence C/i n U 2 = n^fl}) , where 
k, I > 1 and VI < i < k + 1, M : (r h [7 T<). 

• Let ^ / V ' rr| _ by lemma©. 

M x : (I , x : U h K) 

By lemma El r E T', J7 E C7' and 17' E V. By IH, we have two cases: 

- If V' = w, then, by lemma gEJ V = w. 

- If V' = n^LjT/, where fc > 1 and VI < i < fc, M : (T \- U ->• T/). By 
lemma [5TT1 T7 = w (nothing to prove) or V = n^ =1 Tj where p > 1 and 
VI < i < p, 31 < jj < k such that Tj. E T t . Since, by lemma 10 
(r' h C7' -> Tj t ) E (r h C7 -> 77,) for any 1 < i < p, then VI < i < p, 
M : {TV- U ^Ti). 

[3l By induction on the derivation Xx.M : (T h U). We have four cases: 

• If t — rj—, Xx m r r a nothing to prove. 

Xx.M : (enf"- ]u h cj) 

M : (r,x : L7 h T) 

• K Ax.M:(LhC7^T)' n ° thing t0 prOV6 - 

Ax.Af : (L h ^) Ax.M : (r h £7 2 ) 

• Let ; — ■ ; . By IH, we have four cases: 

Ax.M : (r h Ui n L7 2 ) J 

- If Ui = U 2 = u, then U 1 nU 2 = w. 
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- If Ui = u, U 2 = r\^ =1 (Vi -> Tj) where k > 1 and VI < i < k, 

M : (r 2) x :Vi\- Tj), then U1VMJ2 — U2 {ui is a neutral element). 

- If U 2 = u, Ui = nf =1 (Vj -> Tj) where fc > 1 and VI < i < k, 

M : (r 1; x : Vi h Tj), then {/1 l~l f/ 2 = ^1 (<*> is a neutral element). 

- If C/i = nf =1 (V^ - Tj), [/ 2 = n*+J +1 (V5 -> Tj) (hence C/ x n £/ 2 = 
n S(^ -» T)) where fc, Z > 1, VI < i < k + I, M : (T, x : Vi H Tj), 
we are done. 

Let A*.M:(rhE7) WE(Th^) ^ r' □ T and J7 C ^ 

Ax.M : (r' h [/') J 
By IH, we have two cases: 

- If U = (j, then, by lemma l4l3l U' = ui. 

- Assume U = l~l£ =1 (Fj -> Tj), where fc > 1 and AT : (T, x : Fj h Tj) for all 



1 < i < k. By lemma I4IT1 

* Either U' = lu, and hence nothing to prove. 

* Or, by lemmaEH U' = n? =1 (V- -> T/), where p > 1 and VI < i < p, 
31 < ji < k such that V- C VJ< and Tj 4 C T/. Let 1 < i < p. 
Since, by lemma EE (T,x : VjX T u ) Q (T',x : V{ h T/), then 
M:(r',x:F/KT/). 

IH Same proof as that of [3] □ 
Now, we establish the substitution lemma. 

Lemma 10 (Substitution) If M : (T ,x : U h V") and N : (AhU), 
then M[x := N] : (T H A h V). 

Proof By induction on the derivation M : (r, x : £/ h V). 

• If 77 ; r and N : (Ah- T), then N = x[x := JV] : (A h T). 

x : ((x : T) H T) 

• If ——, -. — where FV(M) = {xi, ...,x„,x} and if N : (A h 

M : ((Xj : 0J) n ,x : w h w) 

w), then since FF(Af[x := AT]) = {xi,...,x n } U FV(N), we have by w, 
M[x := A"] : ((xj : w) n n env^ h uj). By lemmas l6l4l and 171 A C erw^ and 
by lemma 15171 (Xj : u>)„ n A C (xj : w) n l~l env^ . Hence, by Ca, M[x := A] : 
((xj :w)„nAhcj). 

rule (Ay.M)[x := AT] = Ay.M[x := AT] : (r n A h J7' T). 

. Let j^LiZtS ^HM . By IH, M[, := AT] : (r n A h T). 
Ay.Af : (1 , x : U r oj — > J ) 
By rule (Xy.M)[x := N] = \y.M[x := N] : (T n A h w -> T). 

Aft: (T^x : ^ h V -> T) Af 2 : (r 2 ,x : t/ 2 h V) c)iV , u v n 

• Let — „ r — — TT , — where x G FV(Mi) n 

Mi M 2 : (ri n T 2 , x : [/1 n J7 2 h T) v i; 

FF(M 2 ) and AT : (A h U x n C7 2 ). By rules n e and JV : (A h [7 X ) and 
N : (A h C/ 2 ). Now use IH and rule -^ e . 

The cases x G FV(Mi) \ FF(A/ 2 ) or x G FV(M 2 ) \ FV(M X ) are easy. 
AJ: (r,x:[/h^) Af : (r,x:[/h[/ 2 ) 

• If 77 777 777 — 77 7T7 USe IH and n*. 

AT : (r, x : h J7i n C/ 2 ) 
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T M : (V, x-.U'V- V) (V, x : U' h V) C (T, x : U \- V) „ , _ 

By lemma H dom(T) = dom(T'), T C T, U Q U' and V E V. Hence by 
E, AT : (A h U') and, by IH, M[x := JV] : (r' n A h V')- It is easy to 
show T n A C T' n A. Hence, (V n A h V) E (r n A h V) and by E, 
M[x := JV] : (r l~l A I- V). 

□ 

Since our system does not allow weakening, we need the next definition (and 
the related lemma below it) since when a term is reduced, it may lose some of its 
free variables and hence will need to be typed in a smaller environment. 

Definition 11 If T is a type environment and U C dom{T), then we write T \u 
for the restriction of V on the variables oflA. If U = FV(M) for a term M, we 
write T \m instead ofT \fv{M)- 

Lemma 12 1. If FV(N) C FV(M), then env™ \ N = env% . 
2. IfFV(M) C dom{Tx) and FV(N) C dom(T 2 ), then 

(Tinr a ) r^ivE (Ti f Af )nr 2 . 

Proof Q] Easy. H First, note that dom((r x n T 2 ) titfiv) = FV(MN) = FV(M) U 
F^(JV) = dom(ri f M ) U doro(r 2 ) = dom{(Ti \ M ) n T 2 ). Now, we show by cases 
that if x : Ui G (ri n T 2 ) t MJV and x : t/ 2 G (Ti f M ) n T 2 then U x E ^ 

• If x G FF(M)nPF(JV) then a; : U{ G r x , x : V'{ G T 2 and U x = U{nU{' = U 2 . 

• If x G FV(M) \ FV{N) then x <£ dom(T 2 ), x : Ux G I\ and C/i = t/ 2 . 

• If x G FF(AT) \ FV(M) then 

- If a; G dom(ri) then x : U[ G r x , a; : U 2 G F 2 and Ux = U[ n Z7 2 E ^2- 

- If x ^ dom(ri) then i : f/ 2 £ 1 2 and f/i = [/ 2 . 

□ 

Now we give the basic block in the subject reduction for /3. 

Theorem 13 If M : {T h [/} and M t>/3 JV, f/ien JV : (r [jyh [/). 
Proof By induction on the derivation M : (T h U). Rule u> follows by theorem l2lll 
and lemma [T2TT1 Rules — »j, — rij and E are by IH. We do — » e 
Mx -.{TxhU^T) g : (r 2 h U) 



Let 



Mi g : (Ti n T 2 h T) 

• If M = M x Q>pPQ = JV where Ml o^P then by IH, P : (ri \ P Y- U -> T). By 

-» e) p g : ((rx f P ) nr 2 h r>. By lemma EE (r x n r 2 ) fpQE (r x f P ) n r 2 . 

Finally, by E<), P Q ■ nT 2 ) FpqK T). 

• The case M = Mig \>p M\P = JV where Q >p P is similar to the above. 

• Assume Ml = Ax.P and Mi M 2 = (Ax.P)M 2 P[x := M 2 ] = JV. Since 
Ax.P : (ri h U — > T), we have two cases: 

- If x G PV(P), then, by lemmaEH P ■ (Ti,x :U\~T). By lemmaHfll 
P[x := M 2 ] : (ri n T 2 h T). Moreover, FV(MxM 2 ) = FV(N) = 
dom(Ti n r 2 ). Hence (ri n T 2 ) \ N = Tx n T 2 and JV : ((ri n T 2 ) T). 

- If x ^ FV(P), then, by lemma H P : (ri h T). Moreover, by 
lemmaEHl FV(P) = FV(Mx) = dom(ri). Hence, (Tinr 2 ) \ P = Tx \p= 
Tx and P[x := M 2 ] = P : (^i n T 2 ) ] P ^T). 

□ 
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Corollary 14 (Subject reduction for 0) 

If M : (T b U) and M t>* N, then N : (r \ N \- U) . 

Proof By induction on the length of the derivation M \>*pN using theorem [T3l D 

Remark 15 A^ote i/iai using lemma&fi^ and\$\), we can also prove the subject 
reduction property for rj-reduction. 



3.2 Subject expansion for (3 

Subject reduction for /? was shown using generation, substitution and environment 
restriction. Subject expansion for (3 needs something like the converse of the sub- 
stitution lemma and environment enlargement. 

The next lemma can be seen as the converse of the substitution lemma. 

Lemma 16 If M\x := N] : {T b U), x e FV(M) and x £ FV(N), then 3 V type 
and 3 Ti,Ti type environments such that: 

• M : (ri,a; : V b U) 

• N : (T a h V) 

• rcr!nr 2 

Proof By induction on the derivation M[x := N] : (T b U). 

If M = x, then x : (x : U b U), N : (T b U) and T = T n (). Then we can 
assume that M ^ x. 

• The last typing rule can not be ax. 

Mix := N] : (T,y : W b T) , jriTr ,„s 

By IH, 3 V type and 3 Ti, Ta type environments such that M : (Ti,x : V b T), 
TV : (r 2 b V) and r,y : Pb C Ti n T 2 . Since y G FV(M) and y g*.FV(iV), by 
lemma EU Ti = Ai, y : lb' and W C lb'. Hence M : (Ai,y : W',af : V b T). 
By rule Xy.M : (A 1 , x : V b lb' -> T) and since Vb' -> T C lb -> T, then 
by rule C, Xy.M : (Ai,x : b b lb -» T). Finally by lemmaEH F C Ai n b 2 . 

M[x := AT] : (F b T) y <£ dom(T) 
" Lct Xy.M[x '.= N] : (r h w — > T) ' 

By IH, 3 V type and 3 Ti, T 2 type environments such that M : (Ti,x : V b T), 
TV : (b 2 b b) and F C bi n F 2 . Since y ^ x, Xy.M : (T u x :V\-lu~^T). 

• Lct := ^ 1 ^ h — — := N ^ 1 ^ 2 h ^ 

° Mi[x := AT] M 2 [x := AT] : (Fi n F 2 b T) 

where M = MxM 2 and a; G FV(M 1 ) n Fb(Af 2 ). 

By IH, 3 Vi, b 2 types and 3 Ai, A 2 ; Vi, V 2 type environments such that M\ : 
{A ljX : Vx b W -» T), M 2 : (Vi.a : b 2 b Vb), A^ : (A 2 b bi), AT : (V 2 b b 2 ), 
Ti C Ai n A 2 and F 2 C Vi n V 2 . Then, by rules n' and -> e , MiM 2 : 
(AinVi,x : binb 2 b T) and JV:(A 2 nV 2 h binb 2 ). Finally, by lemma [13 

bi n r 2 c (Ai n A 2 ) n (Vi n v 2 ). 

The cases x £ FF(M X ) \ Fb(Af 2 ) or x e FV(M 2 ) \ FV(M\) are easy. 

M[x := JV] : (r h [Ti) M[x := AT] : (r b U 2 ) 
6t M[x := AT] : (r b XJ X n f/ 2 ) ' 

By IH, 3 Vi, b^ types and 3 r l7 T 2 ; A x , A 2 type environments such that M : 
Fux : ^ b U x ), M : (A lf x : b 2 b f/ 2 ), A^ : (F 2 b bi), A^ : (A 2 b b 2 ), F C 
Finb 2 andb C AinA 2 . Then, by rule n', M : (l^nA^x : binb 2 b t/inf/ 2 ) 
and A^ : (F 2 nA 2 b binb 2 ). Finally, by lemma EE T C (ri nT 2 ) n (Ai n A 2 ). 
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M[x := N] : (V h U') {V h U') C (r h U) 
6t M : (r h C/) ' 

By lemma EE1 T □ F and {/' C C/. By IH, 3 V type and 3 P^H, type 
environments such that M : {Ti, x : V h U'), N ; (T 2 H 7) and T' C Ti n T 2 . 
Then by rules C () , C and fr, M : (ri, x : V h U) and T C Ti n T 2 . 

□ 

Since more free variables might appear in the /3-expansion of a term, the next 
definition gives a possible enlargement of an environment. 

Definition 17 Let m > n, T = (a;, : Ui) n and U = {xi, ...,x m }. We write T] u 
for x\ : Ui,...,x n : U n ,x n +x : cu,...,x m : ui. If dom(T) C FV(M), we write rf M 
instead of T] FV{ - M \ 

The next lemma is basic for the proof of subject expansion for [3. 

Lemma 18 If M[x := N] : (T I- U), x <£ FV(N) and U = FV{{Xx.M)N), then 
(Xx.M)N : (r| w \-U). 

Proof We have three cases: 

• If U = w. By lemma EH we have (Xx.M)N : (Tf h w). 

• If /7 £ T: We have two cases: 

- If x 6 .FV(M), then, by lemma [TBI 3 V type and 3 ri,r 2 type environ- 
ments such that M : (T 1 ,x : V h U), N : (T 2 h 7} and T C r x n T 2 . 
Hence, by rules -> t and -> e , Ax.Af : (Ti \- V -> U) and (Xx.M)N : 
(Ti nr 2 h f7). Since FF((Ax.Af)iV) = i<V(Af[x := iV]), then rj" = I\ 
and, by rule C, (Xx.M)N : (r| w h C7). 

- If a; FV(M), then M : (T H £/) and, by rule At/.M : (T h w -> £/) . 
By rule w, TV : (enuj h w), then, by rule -> e , (Xx.M)N : (Tnenv* h [/). 
Since FV((Xx.M)N) = FV(M[x := N})UFV(N), then T] u = Plera^. 

• If [/ = nf =1 Ti where V 1 < i < k, T t 6 T: By rule C, we have V 1 < z < k, 
M[x := iV] : (r h T 4 ), then, by the previous case, V 1 < i < k, (Xx.M)N : 
(r| w h Ti), then, by fc - 1 applications of rule n 2 , (Xx.M)N : (r|" h f7). 

□ 

Next, we give the main block for the proof of subject expansion for (3. 

Theorem 19 If N : (T H £/) and M t> N, then M : (r| M h f7). 
Proof By induction on the derivation TV : (r h {/). 

• If ; r and M> x, then M = (Xy.Mi)M 2 where y g FV(M 2 ) and 

x : (x : T h T) 

x = Mi[y := M 2 ]. By lcmma[THl M : {(x : T)t M h T). 

• If ; sj r and M ^aA^, then since by theoremHE FV(N) C FV(M), 

N : {env™ r to) 

(env^)] M = envi 1 . By w, M : (enu^ h w). Hence, M : ((env^)] M h w). 

JV:(r,i:[/hT) 

• If J and M >n Xx.N , then we have two cases: 

Ax.iV : (r h J7 -> T) p 

- If M = Xx.M' where M' N, then by IH, Af : {(T,x : U)]' M ' h T). 
Since by theorem [2H] and lemma EE x G FV(N) C FV(M'), then 
we have (T,a; : [/)T Fy ( M ') = rt^^')^, x : C/ and T^ FV ( M ">\^ = 
P|Ax.M'_ Hence, M' : (rt Aa; M ',x : U \- T) and finally, by Xx.M' : 

(rt Ax - M ' h J7 -»• T). 
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- If M = (Xy.M 1 )M 2 where y & FV{M 2 ) and Xx.N = Mx[y := M 2 ], then, 
by lemma [HI since y & FV{M 2 ) and M x [y := M 2 ] : (T h U -> T), we 
have (\y.Mi)M 2 : (rt (A ^ Ml)M2 h E7 -» T). 

]V : (r h T) x ^ dom(r) , „ AT , . , , 

• If — ; ; — ; — and M >r N then similar to the above case. 

Xx.N : (r h uj -» T) ' 

Ni-.jTxhU^ T) N 2 : (r 2 h U) 

• II ; ; and M ]>n N\ N 2 , we have three cases: 

N t N 2 : (Ti n T 2 h T) p 

- M = MiJV 2 where Mi t>p N t . By IH, Mi : (ri| Ml \~ U ^ T). It is easy 
to show that (Ti n r 2 )T MlJV2 = TiT Ml n r 2 . Now use -> e . 

- M = N\M 2 where M 2 >p N 2 . Similar to the above case. 

- M = (Ax.Mi)M 2 where a; £ FF(M 2 ) and = Mi [a; := M 2 ]. By 
lemmaUHl (Ax.Mi)M 2 : ((Ti n r 2 )T (Ax ' Ml)M2 h T). 

AT : (r h Ux n C7 2 ) 1 

. Let y: < r ^ w iy'^-^'^ and M> P N. By lemmaiH r' □ T 

N : (V h [/') p 

and C/ C C/'. It is easy to show that r'f M C r| M and hence by lemma l6l6l 
(r| M h f7) C (r'| M h [/')• By IH, Mf M : (r h £/). Hence, by C(>, we have 
M : (r't M h [/'}■ 

□ 



Corollary 20 (Subject expansion for 0) 

If N : (T \- U) and M N, then M : (r| M h [/). 

Proof By induction on the length of the derivation M >^ AT using theorem [T9l 
and the fact that if FV{P) C then (r| p )T Q = r| Q . □ 



4 The realisability semantics, its soundness and 
completeness 

In this section we give a realisability semantics for our type system and establish 
both the soundness and completeness of this semantics. 

We start with the definition of the function space and saturated sets. 

Definition 21 Let X, y C M . 

1. We use V(X) to denote the powerset of X, i.e. {y / y C X}. 

2. We define X ~* y = {M G M / M N E y for all N G X}. 

3. Let r£ {/,/?}. We say that X is r -saturated if whenever M >* N and N 6 X , 
then M e X. 

Lemma 22 Let r £ {f,/3}. 

1. If X is f3-saturated, then X is f -saturated. 

2. If X, y are r -saturated sets, then X n y is r -saturated. 

3. If y is r-saturated, then, for every set X C Ai, X y is r-saturated. 

Proof [TJ Note that >* f C t>* p . H is easy, d Let N G X ~-> y, M >* AT and 
P £ X. Then, by theorem [HI M P>* N P and JVPe J. Since ^ is r-saturated, 
then M PeJ- Thus, M G X ~* y. □ 
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We interpret basic types as saturated sets. The interpretation of complex types 
is built up from smaller types in the obvious way. 

Definition 23 Let r G {/, 0}. 

1. An r -interpretation X : A <— * V{Ai) is a function such that: 
V a G A, X{a) is r-saturated. 

2. An r -interpretation X can be extended to U as follows: 

X(uj)=M l(Ui nC7 2 ) = l(Ui) nx(u 2 ) T{U -> T) = X(U) I(T) 

Lemma 24 If J is a P -interpretation then I is an f -interpretation. 

Proof Use lemma [22TT1 □ 

The next lemma shows that the interpretation of any type (basic or complex) is 
saturated, that the interpretation function respects the relation C and that we can 
in some sense expand the terms in the interpretation. 

Lemma 25 Let r G {/,/?} and let X be an r -interpretation. 

1. For any U G U, we have X{U) is r-saturated. 

2. IfUQ V, then X{U) C 1{V). 

3. Let n > and VI < i ^ j < n, x t ^ x r If V N t G X(Ui) (1 < i < n), 
M[( Xi := Ni)™} G X{U), then 

Xx x ....\x n .M G X{U X -» (U 2 -> (... -» (U n -> (7)...))). 
Proof [U By induction on U using lemma |2"2"1 

[21 By induction of the derivation U C T/. [31 By induction on n > using [TJ □ 
We now show the soundness of our sematics. 

Theorem 26 (Soundness) Let r G {/,/?}. If M : {(x t : [/*)„ h U), X is an 
r -interpretation and VI < i < n, N, G X{Ui), then M[{x.i := A;)™] G X(t/)- 
Proof By induction on the derivation M : ((xi : Ui) n h £/}. 

a; : {{x :T)\-T) 

* Let T7 — / M u \ where e?w <^ = ( Xi : 

We have M[(^ := A^)™] G Al = X(w). 

# L P: {(x. t : l/Ql 1 ^ : 1/ h T) 

Ax.P : ((a* : [/;)„ hi/ —>T)' 
lfl(U) = then (Ax.P)^ := A^)™] G I(£7) I(T) = M. 
UX(U) ^ then let TV G X(£T). By IH, P[( Xi := Ni)?,x := N] G J(T). By 
lemma [25111 X(T) is r-saturated. 

Moreover, (Xx.P)[(xi := A^)™] AT >* P[{xi := N^^x := AT]. Hence, 
(Xx.P)[( Xi := Ni)^]N G I(T) and (Az.P)[(^ := A/j)"] G X{U) J(T). 

. Let P : ^ ; ^ ^ r) ' T ^ X ; and N e M. Note that z £ FViP). 
Xx.P : {{Xi : Ui) n h cj -> T) 

By IH, P[(3Gi := iV*)?] G I(T). By lemma HHH X(T) is r-saturated. 
Moreover, (Ax.P)^ := AT,)?] N t>* r P[{x % := AT*)?]. Hence 
(Ax.P)[(ajj := Ai)^] AT G T(T) and (Xx.P)[(xi := A/*)?] G J(co) ~» I(T). 
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• Let Ml M 2 :(r in r 2 i-r) where Tl = {Xl : Ui)n ' {Vj : VjU 

T 2 = { Xi : U() n , (z k : W k \ and T 1 UT 2 = ( Xi : U z nUl) n , { yj : Vj) m , (z k : W k )i. 

Let VI < i < n,P £ T{U t n U<), VI < j < to, Q 3 G T{V 3 ) and VI < jfe < 

I, R k G l(W k ). By IH, Mi [(a* := P)?, (% : = <9j)f] G ^ T(T) and 

M 2 [(x, := Pi)?, (z fc := P fe )i] £ X(C/), 

then (MiM 2 )[(^ := P)?, { Vj := Q,-)f , (*k := Rk)[] = 

M 1 [{x i := P)?, := Qj)f ] M 2 [(x; := P)?, (a* := P fe )i] £ I(T). 

M : ((a* : Z7<)„ H Fi n V 2 ) AJ 
I(Vi) and M[(x, := A^)™] G 1{V 2 ). Hence, M[(ar< := TV;)?] G I(Vi n Va). 

M • $ $ c $' 

* Let , f where 0' = ((^ : Ui) n h CI). 

By lemma iU and EH $ = ((x; : [//)„ h [/'), V 1 < i < n, U t C 17? and 
[7' C [7. By lemma [25U TV; G I(J7/), then, by IH, M[(x; := TV;)?] G I(U') 
and, by lemmadEl M[(x; := N,^} £ I(U). 

□ 



Roughly speaking, completeness of the semantics amounts to saying that if M 
is in the meaning of type U (i.e., M is in T(U) for any interpretation T) then M has 
type U. In order to show completeness, we define a special interpretation function 
I through the typing relation I- in such a way that, if M G I(?7) then M can be 
shown to have type U. This is done in the next definition and lemma. 

Definition 27 1. For every U G U, let an infinite subset Yu ofV such that: 
• IfU ±V, thenVunWv = 0- •Uuev^u=V. 

2. We denote G = {(x : U) / U is a type and x G Yu}- Note that since G is 
infinite, G is not a type environment. 

3. Let M G M. and U G U. We write M : (G h U) if there is a type environment 
rcG such that M :{T\-U). 

4- Let I : A i— * V(Ai) be the function defined by: 
V a G A, 1(a) = {M G M / M : (G h a)}. 

Remark 28 Note that in Definition \27\ we have associated to each U G U, an 
infinite set of variables Yu in such a way that no variable is used in two different 
types, and each variable of V is associated to a type. Obviously, as long as these 
conditions are satisfied, we have the liberty of dividing the set V as we wish. We 
will practice this liberty in the proof of theorem \32l 

Lemma 29 1. IfTS' C G and dom{T) = dom(T'), then T = T' . 

2. 7/r,r C G, then mV = TUT' C G. 

3. I is a (3 -interpretation. L.e., V a G A, 1(a) is [3-saturated. 
Hence, I is an f -interpretation. 

Furthermore, we extend I to U as in Definition \23\2\ 

4. LfUe V, then I(U) ^ and I(C7) = {M G M / M : {G h U)}. 
Proof 

[Tl Let (x : U) G V and (x : U') G T'. Hence, ieV(, and x G Y v , and so, {7 = U' 
(otherwise, Wu nVy = 0). 
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[3 Let r = (xi : Ui)„, (yj : Vj) m and V = (x, : U!) n , (z k : W k )i where yj ^ z k 
for all 1 < j < m and 1 < k < I. Since (xi : Ui) n C G and (xi : Ul) n C G, by 
[H Ui = JJ[ for all 1 < i < n. Hence, r n V = F U V C G. 

El Let a € A, M G M, M >* N and N G 1(a). Then JV : (r h a) where 
L C G. Let FV(M) \ dom(T) = {xx, ...,x„} and V 1 < i < n, take Ui such 
that x, G Y Ut . Then A = T,( Xl : U,) n C G and rt M = T,(xi : uj) n . By 
corollary EQl M : (V\ M h a) and, by lemma EH A C r| M . Hence, by rule 
C, M : (A h a). Thus, M G 1(a). Hence 1(a) is /3-saturated and so, I is a 
/3-interpretation. Finally, by lemma l24l 1 is an /-interpretation. 

[U The proof of !([/) ^ is as follows: let ieV^ 0. Then, x : U G G and 
since a; : ((x : £/) h £/) then x G I(J7). 

Now we do the second part by induction on U. 

- U = a: By definition of I. 

- U = uj: By definition, I(lu) = M. So, {M G M / M : (G h w)} C I(uj). 
Conversely, let M G where F7(M) = {xi, x„}. We have M : 
((xi : cj) n h u>). V 1 < i < n, take C/i such that Xi G V;/ s . Then 
L = (xi : C/i)n G G. By lemma EE! M : (Thu). Hence M : (G h w). 
Thus, C {A/ G X / M : (G h uj)}. 

We deduce = {M € M / M : (G h a;)}. 

- U = U 1 HU 2 : By IH, E(Z7i n U 2 ) = I(Z7i) n I(J7 2 ) = 
{M eM/M:(Gh Ui}} n {M € M / M : (G h £/ 2 }}. 

* If M : (G h E7i) and M : (G h £7 2 ), then M : (Tj h f/i) and M : 
(r 2 h C/i) where r x ,r 2 C G. By lemmaEE dom(Tx) = dom(T 2 ) = 
FV(M). By lemmallTJ M : (Tj n L 2 h t/i n [7 2 ). Since r x ,r 2 G G, 
then, by[fl Li = L 2 and r x nL 2 = r x C G. Thus M : (G h U x U U 2 ). 

* If M : (G h Ux n U 2 ), then M : (T F J7i n U 2 ) where F C G. 
By C, M : (r h U x ) and M : (T h U 2 ), then M : (G h C/i) and 
Af:(GhC/ 2 ). 

We deduce I(C/i n C/ 2 ) = {M G M / M : (Gh U X U U 2 )}. 

- U = V -^T: Then I(V ->T) = 1(7) I(T). By IH, 

1(7) = {M G / M : (G h V}} and I(T) = {M £ M / M : {G\- T)}. 

* Let M G 1(7) I(T) and x G Vy such that x FV(M). By 
rule ax' (see lemma HE]), x : ((x : 7) h 7). Since (x : 7) G G, 
then x : (G h V). By IH, x G 1(7). Hence Mx G I(T) and so 
Afx : (r h T) where T C G. Since x F7(M), then L = A, x : V 
and A G G. By lemma [9l2l we deduce that M : (A h 7 T). 

* Let M,N e M such that M : (G h 7 T) and TV : (G h 7). We 
have M : (Fi h 7 ^ T) and TV : (F 2 h 7) where Fi, F 2 C G. Thus 
M iV : (Tx n T 2 h T). Since, by lemma[29l2l T x n F 2 C G. Therefore 
MiV : (GhT). 

We deduce 1(7 -> T) = {M G M / M : (G h 7 -> T)}. 

□ 

Now, the I of definition[23will be used to show the completeness of the semantics. 

Theorem 30 (Completeness) Let r G {f,f3}. Let Ux,—,U n ,U G U and M G 
suc/i that FV(M) = {xi,...,x„}. //V r -interpretation X and V Ni G T{Ui) 
(l<i<n), M[(x'i := ATj)?] G T(t7), t/ien M : ((x, : f/i) n h U). 
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Proof We distinguish three cases: 

• If U = w, then M : ((a* : uj) n h lu). Thus, by lemma 17121 M : {{xi : U l ) n H w). 

• If U € T, then, let V = U x -> (C/ 2 -> (... -> (f/„ -> £/)•••))• By hypoth- 
esis and lemma 125131 V r-interpretation X, \x\....\x n .M £ 1{V). Hence, 
\x\....Xx n .M £ 1(F) where I is the interpretation of definition 127141 By 
lemma [29m \x\....\x n .M : (r h where T C G and, since \x\....\x n .M 
is closed, T — (). By rule ax', V 1 < i < n, x% : (xi : Ui h [/<}, by n ap- 
plications of — > e we deduce (Axi....Aa; n .M)xi...a; Ti : ((x, : {7j)„ h {/). Since 
(\xi....\x n .M)xi...x n >% M, then by corollary [Ml M : ((x l : Ui) n h {/). 

• If U = nf^Tj, then, by hypothesis, V r-interpretation X, V JVj £ X(C/ 4 ) 
(1 < i < n), and V 1 < j < m, M[(xi := iVj)™] G I(Tf). By the previous case, 
V 1 < j < m, M : {{xi : Ui) n h Tj). By m — 1 applications of rij we deduce 
M : ((a* : Ui) n \- U). 

□ 



5 The meaning of types 

Obviously the meaning of a type U should be based on the intersection of all the 
interpretations of U. However, since we have been using two different kinds of 
interpretations (J3- and /-interpretations), we give two definitions for the meaning 
of a type. We will show that these two definitions are equivalent. 

Definition 31 Let r £ {/,/?}. We define the meaning [U] r of U £ U by: 

[U] r = p| 1(U) 

X r — interpretation 

The next theorem shows that the meaning [U] of U is the set of terms typable by 
U in a special environment and that [U] is stable by /3-reduction and /3-expansion. 

Theorem 32 Let r £ {/, 0} and U £ U. 

1. [U] T = {M £ M / M : {env™ h U)}. 

2. [U] r is stable by ^-reduction. I.e., if M £ [U] r and M >^ N, then N £ [U] r . 

3. [U] r is stable by (3 -expansion. I.e., if M £ [U] r , N >~ M, then N £ [U] r . 

4. [U] r = {M £M / M>*pN and N : {env* h U)}. 
Proof 

Q] Let M £ M. such that M : {envff h U) . Let I be an r-interpretation and take 
FV(M) = dom(env^f) = {x\, X2, ■ ■ ■ , x n }. By theorem |2"o1 since VI < i < n, 
x t £ J(uj) = M, then M = M[(x := a*)?] £ 1{U). Hence, M £ [U] r . 
Conversely, let M £ [U] r . Take the interpretation I given in Dennitionl27lsuch 
that (recall remark [28j) FV(M) C V w . Since M £ l(U) then M : (T H U) 
where L C G. But FV(M) C V w and by lemma EEJ FV(M) = dom(r). 
Hence L = env^ 1 . 

We conclude that [U] r = {M £ M / M : (env™ h U)}. 

[2 Let M £ [U] r such that M \>* p N. By [TJ M : (era;^ h f7). By subject 
reduction for ft corollary [T4J N : {(em;* 1 ) fjyh U). Since by theorem 12111 
FV(N) C FV^(M) then (enw^) U= enw^. Thus by[U JV £ [U] r . 



18 



El Let M E [U] r such that N \>* M. By [TJ M : (env^ 1 h U). By subject 
expansion for (3 corollary [201 N : ((env^ 1 ) f h {/). Since by theorem 12111 
FV(M) C FU(iV) then (era/^ ) 1^= ew^. Thus by[U TV G [C/] r . 

H ByHl [U] r E {M E M / M >* p N and N : (env^ h U)}. Conversely let 
M t>* N and TV : (env% h [/). ByHJ iV G [£/] r . Hence, byEl M 6 [C/] r . 

□ 

Corollary 33 Let (7 el). We Ziaue ttai [[/]/ = [U]p. 

Proof By theorem E2IU [U] f = [U]p = {M E M / M : (env™ h [/)}. □ 
Hence, we write [[/] instead of either [[/]/ or [U]p. 

Remark 34 TTie reader may ask here why we introduced the two notions of satu- 
ration if the meaning of a type does not depend on whether this meaning was made 
using [3 -interpretations or f -interpretations. The answer to this question is that up 
to here, we could equally use (3 -interpretations or f -interpretations. However, to es- 
tablish further results related to the meaning of types, especially for those types whose 
meaning consists of terms that reduce to closed terms, then we need (3 -saturation. 
For this reason, in the rest of paper, we only consider (3 -saturation. 

Let us now reflect further on the meaning of types as given in definition 1311 The 
next lemma gives three examples. 

Lemma 35 Let a E A, U = u> — > (a — > a), V — a — > (uo — > a) and 
W — (uj — * a) — > a. We have: 

1. [U] = {M E M/M >* Xx.Xy.y}. Note that Xx.Xy.y : {() h U). 

2. [V] = {M E M/M \>* p Xx.Xy.x}. Note that Xx.Xy.x : {() h V). 

3. [W] = {M E M/M Xx.xP where P £ M}. 
Note that Xx.xP : (env* x - xP h W) . 

Proof 

1. It is easy to show that Xx.Xy.y : (() h U). Note that env Xx - Xy - y = (). 
Hence, {M E M/M \>* p Xx.Xy.y} = {M E M/M \>* Xx.Xy.y and Xx.Xy.y : 
( env \x.\y. y |- [/)} C [U] by theorem E2H 

Conversely, let M E [U] and y ^ FV(M). Take the (3- interpretation 2 such 
that 1(a) = X = {M E M/M >* y}. Since M E [U] then M E 1(U) = 
M ~> (1(a) w 1(a)) = M ~+ (X ~> X). Let x ^ y such that x & FV(M). 
Since x E M and y E X, then Mxy E X, Mxy \>*^ y and by theorem 12151 
M \>*p Xx.Xy.y. 

2. It is easy to show that Xx.Xy.x : (() h V"). Let I be a /^-interpretation. By 
theorem [26l Xx.Xy.x E 1(V). By lemma [25111 1(V) is /3-saturated. Hence, 
{M E M/M >* Xx.Xy.x} C 1(V). Thus, {M E M/M t>* Xx.Xy.x} C [V]. 
Conversely, let M E [V] and x g" FV(M). Take the (3- interpretation 1 such 
that 1(a) = X = {M E M/M [>* p x}. Since M E [V] then M E 1(V) = 
1(a) ~* (M *~> 1(a)) = X ~* (M ~* X). Let y ^ x such that y £ FV(M). 
We have x E X and y E M, then Mxy E X and Mxy >^ x. Thus, by 
theorem [2l5l M t>* p Xx.Xy.x. 

3. Let P G M. Using lemma 171121 we can show that Xx.xP : (env Xx - xP h W) 
(irrespectively of whether x E FV(P) or not). Now, {M E M/M\>*pXx.xP} = 
{M E M/M t>* Xx.xP and Xx.xP : (env Xx - xP hff)}C [W] by theorem 



19 



Conversely, let M E [W] and x £ FV(M). Take the /3-interpretation 2 such 
that 2(a) = X = {M G M/M >* p xP where P G X}. Then M G J(W) = 
(.M X) ~> X. Since i e A< J, then M x <E X and M x t>J 3 xP where 
P G M. Thus, by theorem [2151 M Xx.xQ where Q G Al 

□ 

The meanings of the types U and V (of lemma 1551) contain only terms which are 
reduced to closed terms. Due to the position of uj in W, the meaning of W does 
not solely contain terms which are reduced to closed terms. In U and V, oj has a 
negative occurence, but in W, u> has a positive one. We will generalize this result. 

Definition 36 1. We define two subsets U + and U~ o/U as follows: 

• V a E A, a EU + and a E U~ . 

• wer. 

• J/ U E U+, ftera f7 n V E U+. 

• 7/Z7,V G IT, i/ien [/n^er. 

• IfU G U- andT E U+ ; i/ien [/ -» T G U+. 

• 7/ZJ G U+ andT E U~, i/ien [7 — *• T G U~ . 

2. Let 5 C V where S ^ 0. 

(^aj We say i/iai a term M is S-almost closed if M \>% N and FV(N) C 5. 

We denote AA the set of S-almost closed terms, 
(b) We define the function l s : A^ V(M) by: V a E A, Is (a) = X s . 

The next lemma shows that 2s is a /3-interpretation and relates 2s(£/) and 
according to whether U E U + or U E U _ . 

Lemma 37 Let S <ZV where 5^0. 

L is a P -interpretation. I.e., V a E A, 2s (a) is [3-saturated. 
Hence, we extend 1$ to U as in Definition \ 231 21 

2. IfU E U+, thenl s {U) C .M 5 . 

5. 7/f7 G £/ierc X 5 C I S (C7). 

Proof [U Easy since Is (a) = .M which is /3-saturated (use theorem I2llj) . 
We show [2] and [3] by simultaneous induction on U. 

El Let U E U+ and M E T S {U). 

- If U = a, the result comes by definition of 2s. 

- If J7 = C7i n t/ 2 and [/1 G U+, then M G l s {Ui) and, by IH, M G M s . 

- HU = V^T,VeV^ and T G U + , then let 1 e 5. We have x G 
then, by IH, a; G I S (V) and Ma; G 2 S (T). By IH, Mx G .M 5 , then 
Mi iV and FV(N) C 5. We examine the reduction Mx >^ /V. 

* If M [>* P and iV = Px, then PF(P) C PF(AT) C 5. 

* If M >* Xy.Q and Q[y := x] /V, then 

M Ay.Q = \x.Q[y := x] >* Ax./V and PT/(Ax./V) C FV(AT) C S. 

Then M M' and FV(M') C 5. Thus M E M s . 
U Let C7 G U" and M G 
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- If U — a, the result comes by definition of T$. 
-HU = w, then M G T S {U) = M. 

- HU = U 1 HU 2 and U U U 2 G IT, then, by IH, M G T S {Ui) and M £ 
X s (Z7 2 ),thenMe2 s (C/ 1 nC/ 2 ). 

- If U = V -> T, 7 G U+ and T e U", then let P G Is(V). We have 
M>*pN and FV(A0 C S. By IH, P G M s , then P>£Q and PV(Q) C 5. 
We have MP [>* p NQ and FV(NQ) = FV(N) U PF(Q) C S, then 
MP G M s , and, by IH, MP G T S {T). Thus M G T S {V -> T). 

□ 

The next corollary shows that if U G U + then [[/] contains only elements which 
/3-reduce to closed terms and [U] is the set of all terms that /3-reduce to closed 
terms typable by U. Note that in the proof of [2] below, we need /3-saturation and 
that this is the reason why we adopted exclusively /3-saturation since remark 1341 

Corollary 38 Let U G U + . 

1. If M G [U], then M >* p N and N is closed. 

2. [U] = {M eM /M>*pN and N : {() I- U)}. 
Proof 

[U Let S C V such that S ^ and S n PF(M) = 0. Since M £ [C7], then M G 
Is(?7), and, by lemmata M >* N and FV(N) C 5. But, by theoremEED 
P(iV) C PF(M), then FV(N) = 0. 

El Let M G [t/]. By lemma ESH M: (Th [/}. By [2 M \>* N and iV is closed. 
Hence by subject reduction for (3 corollary [T4l N : (r \jf\- U). Since N is 
closed iV : (() h £/). 

Conversely, let M such that M >% AT and AT : (() h U), and take a /3- 
interpretation X. By theorem E3 A~ £ 2"(E/) and, since I(U) is /3-saturated, 
M G T(C/). Then M G ^_i„ terpretatio „ and so, M € [U]. 

□ 

Remark 39 Note that neither strong nor weak normalisation holds in general for 
typable terms. For example, (Xx.xx)(Xx.xx) : (() h lj). As another example, take 
Xy.y((Xx.xx)(Xx.xx)) : (() h (u — > a) — > a) fey lemma\3~5l 

We cannot even establish a strong normalisation result for positive types. For 
example, (Xy.Xx.x)((Xx.xx)(Xx.xx)) : (() h a — > a). In what follows however, we 
will establish a weak normalisation result for positive types. 

Definition 40 We define the function I : A h-> P(X) fey: V a G A, 1(a) = Af 
where M is the set of (3 -normalising terms. 

Lemma 41 1. X is a P -interpretation. I.e., V a G A, 1(a) is [3-saturated. 
Hence, we extend I to U as in Definition 1 231 21 

2. If U G U+, then 1(U) C JV. 

5. Let A/"' = {aiMi ...M n eM jx E V and Mi... M n G A/"} . Aote. A/"' C M. 
IfU GU-, fenA/ 7 C1(U). 

Proof |T] is obvious. We show El and [3] by simultaneous induction on U. 
El Let [/ G U+ and M £ T(Z7). 
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- If U = a, the result comes by definition of 2. 

- If U = Ui n U 2 and U x G U+, then M G T(f7 x ) and, by IH, M 6 TV. 

- If U = V -> T, V G IT and T G U+, then let x G V C M' such that 
x g FV(M). By IH, x G 2"(V) and Mx G X(T). By IH, Mx G M. 
Hence, by theorem [2151 M G AT. 

El Let Z7 G U- and M £ AP 

- If P = o, the result comes by definition of X. 

- If U = u, then M G X(P) = M. 

- If U = C/inJ7 2 and Pi, P 2 G then, by IH, M G X(P X ) and M G X(P 2 ), 
then M GX(Pr nP 2 )- 

- If P = -> T, V G U+ and T G U", then let P G Z(V). We have 
M = %M\ ...M n where M, G A/" for 1 < i < n. By IH, P eAf. Hence, 
MP G A/"' and by IH, MP e J(T). Thus M G 1(V T). 

□ 

The next corollary shows that if U G U + then [U] contains only elements which 
are normalisable. 

Corollary 42 Let U G U+. 

1. If M E [U], then M is normalisable. 

2. If M : (() h {/) t/ien M is normalisable. 

3. [U] = {M EM / M \>* N, N is m normal form and N : (() h £/}}. 
Proof 

□ By lemma H2 M G [P] C I(P) C A/". 
H By Theorem [261 M G X(P). By lemma ED M G A/". 

[21 Let M G [U]. By Corollary EH A/ [>* P and P : (() h P). Since by [2 M is 
normalisable then by Church-Rosscr P is normalising. Let N be the normal 
form of P. By Subject reduction corollary [TJJ JV : (() h P). 
The inverse inclusion is obvious by corollary 138121 

□ 

Remark 43 It should be noted that positive types are not exlusively the types which 
satisfy the properties proved about them (e.g., corollary ] 3 8\) . For example, let us take 
the non-positive type U' = (lu — > 6) — > (a —> a) where a and b are different. We can 
show that \U'\ only contains terms which reduce to the closed term Xx.Xy.y (and 
that Xx.Xy.y : (() h U') ). Hence, U' is a type which is not positive, yet for which 
corollary \38\ holds. Note that, since a and b are different, then (lo — > b) cannot be 
used in type derivations. 

6 Conclusion 

In this article, we considered an elegant intersection type system for which we estab- 
lished basic properties which include the subject reduction and expansion properties 
for [3. We gave this system a realisability semantics and we showed its soundness 
and completeness using a method comparable to (yet more detailed than) Hindley's 
completeness semantics for an earlier intersection type system. The basic difference 
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between both proofs is that Hindley's notion of saturation is based on equivalence 
classes whereas ours is based on a weaker requirement of weak head normal forms. 
Hence, all of Hindley's saturated models are also saturated in our framework yet on 
the other hand, there are saturated models based on weak head normal form which 
cannot be models in Hindley's framework. This means that our method provides 
a larger set of possible models and this leaves the choice open for better models or 
counter-models for particular applications. We have even proved that for different 
notions of saturation (based on weak head reduction and normal /3-reduction) we 
obtain the same interpretation for types. Another difference between our approach 
and that of Hindlcy is that he constructs his models modulo the convertibility 
relation, whereas we establish that the interpretation of types is stable by both 
/3-reduction and /3-expansion. 

Furthermore, we reflected on the meaning of types, especially on the so-called 
abstract data types where typability and realisability coincide. The presence of u> 
in intersection type systems prevents typability and realisability from coinciding as 
one sees for example in Xx.xP (where P may contain free variable and may not be 
normalisable) whose type is (w — > a) — ► a. We found a set of types U + for which 
we showed that typability and realisability coincide. We have also shown that this 
set satisfies the weak normalisation property. 
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